Microsoft Defender for Endpoint Protection Elevation of Privilege Vulnerability

...

Microsoft Azure File Sync Elevation of Privilege Vulnerability

...

Chromium: CVE-2024-1284 Use after free in Mojo

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Windows Nearby Sharing Spoofing Vulnerability

...

Chromium: CVE-2024-0225 Use after free in WebGPU

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2023-6112 Use after free in Navigation

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

...

GitHub: CVE-2023-25815 Git looks for localized messages in an unprivileged place

...

AutoDesk: CVE-2023-27910 stack buffer overflow vulnerability in Autodesk® FBX® SDK 2020 or prior

...

Microsoft SharePoint Server Spoofing Vulnerability

...

Windows NFS Portmapper Information Disclosure Vulnerability

...

Microsoft SQL Server Integration Service (VS extension) Remote Code Execution Vulnerability

...

Chromium: CVE-2023-0704 Insufficient policy enforcement in DevTools

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2023-0474 Use after free in GuestView

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2023-0471 Use after free in WebTransport

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium:CVE-2023-0139: Insufficient validation of untrusted input in Downloads

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Windows Print Spooler Elevation of Privilege Vulnerability

...

Chromium: CVE-2022-3661 Insufficient data validation in Extensions

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Windows WebBrowser Control Remote Code Execution Vulnerability

...

Chromium: CVE-2022-1862 Inappropriate implementation in Extensions

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Skype for Business and Lync Spoofing Vulnerability

...

Windows Desktop Bridge Elevation of Privilege Vulnerability

...

GitHub: Uncontrolled search for the Git directory in Git for Windows

...

Microsoft Office Information Disclosure Vulnerability

...

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

...

Remote Desktop Client Remote Code Execution Vulnerability

...

Windows Defender Application Control Security Feature Bypass Vulnerability

...

Windows GDI+ Information Disclosure Vulnerability

...

Microsoft SharePoint Server Remote Code Execution Vulnerability

...

Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability

...

Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability

...

Windows Security Account Manager Remote Protocol Security Feature Bypass Vulnerability

...

Windows GDI Elevation of Privilege Vulnerability

...

Microsoft Defender Remote Code Execution Vulnerability

...

Chromium: CVE-2021-30552 Use after free in Extensions

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2021-30515 Use after free in File API

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Microsoft Office Remote Code Execution Vulnerability

...

Microsoft SharePoint Server Spoofing Vulnerability

...

Chromium CVE-2021-21163: Insufficient data validation in Reader Mode

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2020-27844: Heap buffer overflow in OpenJPEG

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Microsoft Browser Memory Corruption Vulnerability

...

Microsoft SharePoint Server Spoofing Vulnerability

...

Windows Graphics Component Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise a user’s system. There are multiple ways an attacker could exploit...

Microsoft splwow64 Information Disclosure Vulnerability

An information disclosure vulnerability exists in how splwow64.exe handles certain calls. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system low-integrity to medium-integrity. This vulnerability by itself does not allow...

Windows Font Driver Host Remote Code Execution Vulnerability

A remote code execution vulnerability exists when the Windows Font Driver Host improperly handles memory. An attacker who successfully exploited the vulnerability would gain execution on a victim system. The security update addresses the vulnerability by correcting how the Windows Font Driver Hos...

OpenSSL Remote Denial of Service Vulnerability

Microsoft is aware of a publicly disclosed remote denial of service vulnerability for OpenSSL version 1.1.1d and newer. Previous versions prior to 1.1.1d are unaffected. The vulnerability is fixed in version 1.1.1g. For more information, please see the OpenSSL security advisory. Microsoft has...

Remote Desktop Connection Manager Information Disclosure Vulnerability

An information disclosure vulnerability exists in the Remote Desktop Connection Manager RDCMan application when it improperly parses XML input containing a reference to an external entity. An attacker who successfully exploited this vulnerability could read arbitrary files via an XML external...

Microsoft SQL Server Reporting Services XSS Vulnerability

A cross-site scripting XSS vulnerability exists when Microsoft SQL Server Reporting Services SSRS does not properly sanitize a specially-crafted web request to an affected SSRS server. An attacker who successfully exploited the vulnerability could run scripts in the context of the targeted user...

Bluetooth Low Energy Advisory

Executive Summary Microsoft is aware of an issue that affects the Bluetooth Low Energy BLE version of FIDO Security Keys. Due to a misconfiguration in the Bluetooth pairing protocols, it is possible for an attacker who is physically close to a user at the moment he/she uses the security key to...